Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Gentoo: GLSA-200406-08 Critical: OpenSSL Multiple Vulnerabilities

gentoo
Calendar Grey June 10, 2004
Scroller Gentoo
A distant buffer overflow vulnerability in the Subversion package on Gentoo systems can result in unauthorized code execution. Please ensure to update promptly for safety.
Subversion is vulnerable to a remote Denial of Service that may be exploitable to execute arbitrary code on the server running svnserve.

Summary

Gentoo Linux Security Advisory GLSA 200406-07 https://security.gentoo.org/ Severity: High Title: Subversion: Remote heap overflow Date: June 10, 2004 ID: 200406-07

Synopsis ======= Subversion is vulnerable to a remote Denial of Service that may be exploitable to execute arbitrary code on the server running svnserve.
Background ========= Subversion is a revision control system that aims to be a "compelling replacement for CVS". It enjoys wide use in the open source community. svnserve allows access to Subversion repositories using URIs with the svn://, svn+ssh://, and other tunelled svn+*:// protocols.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-util/subversion <= 1.0.4 >= 1.0.4-r1
=====...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service subversion gentoo remote code execution heap overflow

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service subversion gentoo remote code execution heap overflow

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround